Privacy policy
Effective and last updated:
Your words and progress are saved in your browser. Typing does not send a request for every word. Completed boards are sent to our server for validation. We do not sell personal data, run advertising, or use a separate behavioral analytics service.
Who operates the game
HANGWORD at hangword.com, including its STACKWORD mode, is operated by Thomas Beamshooter, based in Montana, United States. For privacy questions or requests, contact sec@beamshooter.com.
Information on your device
The game uses your browser’s local storage to remember boards, placed words and positions, statistics, settings, and game mode. An older board may also be retained locally as a backup after a rules change. This information stays in that browser unless you choose to share it or submit a completed board for validation. Local records do not have an automatic expiry.
To remove these saved records, open Settings in the game and choose Clear saved data, then confirm. You can also clear hangword.com’s site data in your browser. A fresh game may save default preferences again.
Information processed by the service
- Game requests: when you load a puzzle or dictionary, the service handles the requested URL, date, and mode. When you complete a board, it processes its words, positions, puzzle identifier, date, and mode to independently check the rules.
- Connection and operational data: our hosting provider, Cloudflare, processes network information such as your IP address and technical request metadata to deliver and secure the site. Operational logs can include request URLs, timing, status, and error details.
- Abuse prevention: the game derives a daily, secret-key-protected identifier from your IP address and keeps limited timestamps, counters, cooldowns, and hashes of submissions or invalid words. These records are pseudonymous, not anonymous. The abuse database does not store raw IP addresses, raw words, or complete boards.
- Messages you send: if you email us, we receive your email address and whatever information you include. Please avoid sending unnecessary sensitive information.
The shared daily-puzzle database stores the day’s foundation and configuration, not an account or a saved board for each player. We do not offer player accounts or collect payment details in the current game.
Why we process information
We use information to provide the game, validate solutions, save your requested browser experience, investigate faults, prevent spam and misuse, respond to requests, and comply with legal obligations. We do not use security identifiers to follow you across unrelated websites or make decisions with legal or similarly significant effects.
Where European or UK data-protection law applies, our legal bases are providing the service you request where necessary for a contract, our legitimate interests in operating and protecting the game and answering correspondence, and compliance with legal obligations, as applicable. Where consent is legally required for a particular use, we will obtain it before that use.
Providers, sharing, and international processing
Cloudflare provides hosting, content delivery, the API, database storage, and security infrastructure. It processes data in accordance with its service terms and privacy policy. Our email providers also process messages you send us. Data may be processed in the United States and other locations where these providers operate; applicable provider agreements and legally required transfer safeguards govern that processing.
We may disclose information when reasonably necessary to comply with law, handle a valid legal request, investigate abuse, or protect legal rights and safety. We do not sell personal data or process it for targeted advertising.
The built-in sharing controls act only when you use them. They prepare a result containing the date, mode, progress, board shape, and site address, without the puzzle letters. If you copy, post, or send it, the destination you choose handles it under its own rules. Screenshots or text that you prepare yourself may reveal more.
Storage and retention
- Browser saves: retained until you clear them or your browser removes them. Clearing one device does not clear another.
- Validation: submitted boards are processed to answer the request; the application does not save player boards in its server database or deliberately log request bodies.
- Abuse records: deleted after 24 hours without activity for that identifier. The identifier rotates daily. This expiry does not describe all hosting logs or information held for a separate legal obligation.
- Operational logs: retained under Cloudflare’s service settings and retention periods for operations and security. These are separate from the 24-hour abuse records; see Cloudflare’s logging documentation.
- Correspondence: kept as needed to answer and document your request, resolve disputes, and meet legal obligations. A justified legal or security hold may require longer retention of relevant records.
Cookies, fonts, and privacy signals
The game does not set advertising or analytics cookies. Its saves use local storage instead. Cloudflare may use essential security cookies depending on the protections applied to a request. Fonts are served from hangword.com; loading a page does not contact Google Fonts.
We do not track browsing across unrelated services. Because we do not sell personal data or use it for targeted advertising, a Do Not Track or Global Privacy Control signal does not need to switch off those activities. You can still exercise any applicable rights by contacting us.
Your choices and rights
Depending on the law that applies to you, you may have rights to access, correct, delete, or obtain a portable copy of personal data, object to or restrict processing, withdraw consent where it is the basis for processing, and opt out of certain uses. We do not discriminate against you for exercising applicable privacy rights.
Send a request to sec@beamshooter.com with the subject Privacy request and enough information to explain it. We may ask for proportionate information to verify the request or locate records. Daily identifiers and short retention can limit what we can associate with a person; we will not collect additional identifiers solely to build a history of your play. We respond within the time required by applicable law and explain any relevant exception or verification problem.
If we deny a request, you can ask for an appeal at the same email address with the subject Privacy appeal. We will review and explain the result within the applicable legal period. You may also complain to your local privacy regulator or, in Montana, the Office of Consumer Protection.
Children and security
This is a general-audience word game. We do not request a child’s age, name, contact profile, or location, and we do not knowingly solicit personal contact information from children under 13. Limited technical information is processed to operate and secure the service as described above. A parent or guardian with a concern should contact us so we can investigate and take appropriate action.
We use HTTPS, server-side validation, bounded requests, access controls, and abuse throttling. No system can guarantee perfect security. Report a suspected problem privately to sec@beamshooter.com; do not access other people’s information or disrupt the service.
Changes and contact
We will date updates on this page. For material changes, we will provide appropriate notice and obtain consent where the law requires it. For questions about this policy or our handling of information, contact Thomas Beamshooter at sec@beamshooter.com.